home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Megarom
/
Megarom Macintosh CD Software (Quantum Leap)(1992).iso
/
VIRUS Utils
/
VIRUS ALERT - CPro Trojan Horse
< prev
next >
Wrap
Text File
|
1993-01-08
|
3KB
|
83 lines
As part of Symantec's commitment to virus protection, it is our responsibility
to inform you that a new Trojan Horse was recently discovered, called CPro
which affects all Apple Macintosh computers systems. This Trojan Horse
application, found in a file named CPRO141.SEA, goes under the guise of an
update to a popular file compression program. If the CPro application is run,
it will attempt to format mounted hard disks and floppy disks. However, it is
only successful in formatting floppy disks.
Owners of SAM Version 3.0 and Version 3.5 can instantly update the detection
and protection capabilities of the program against this new Trojan Horse by
entering the new virus definition into SAM Virus Clinic. In conjunction with
the new SAM User Definition and SAM 3.0/SAM 3.5, you will be able to scan for
CPro from both Virus Clinic and SAM Intercept.
Alternately, you may also download the new Virus Defintions file located in
this library.
USER DEFINITION UPDATE DETECTION INSTRUCTIONS
Use the following instructions only if you wish to update manually instead of
downloading the new Virus Defintions file.
FOR VERSION 3.5:
Open SAM Virus Clinic. From the Options menu in version 3.5 of SAM Virus
Clinic select "Virus Definitions". Select "Add Resource"
Now enter the following information:
Name: CPro
Search String (Hex): ADE9 7406 4EFA FFF4 343C 000A
Offset: Equal to 110
From: Start
Resource Type: CODE
Resource ID: Equal to 2
Size: Equal to 298
Verification: B57F
(Check: 668D)
After you've entered the above information, click "DONE" to add the definition
to SAM.
FOR VERSION 3.0:
Open SAM Virus Clinic. From the Options menu in version 3.0 of SAM Virus
Clinic select "Advanced Options" and then select "Add Definition (Resource)"
from the Definitions menu. Now enter the following information:
Virus Name: CPro
Resource Type: CODE
Resource ID: = 2
Resource Size: = 298
Search String (HEX): ADE9 7406 4EFA FFF4 343C ØØØA
(no spaces)
String Offset: = 11Ø FROM START
(NOTE: Ø = zero)
Please type in the search descriptions without any spaces. As a guard against
incorrect entry, SAM 3.0 has a "Check" field in the definition screen. If the
above information is entered correctly, your check field should be: 668D.
After you've entered the above information, click "Add" to add the definition
to SAM. This information should be added to the SAM User Definitions file
located in your System Folder.
UPDATE REPAIR INSTRUCTIONS
Remember that entering the above user definition into SAM Virus Clinic only
updates the detection capabilities of SAM. For repair capabilities, users can
download the virus definitions file for both versions 3.0 and 3.5 from The
Symantec Bulletin board at (408) 973-9598, CompuServe, America Online or
Applelink.
If you don't own a modem and cannot download the virus definitions file, you
can receive a disk with repair capabilities for $12.00 (plus sales tax where
applicable). To order, please call Customer Service at (800) 441-7234 in the
US
and Canada.